Description
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fullworks | Quick Event Manager | ≤ 9.7.4 | — |
High · 7.1
CVE-2023-23979
EUVD-2023-28043GHSA-734q-pq52-4w9r
WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)
Published Apr 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack